Follow us on Twitter!
The important thing is not to stop questioning. - Albert Einstein
Thursday, April 17, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 29
Guests Online: 26
Members Online: 3

Registered Members: 82815
Newest Member: medjiking
Latest Articles
View Thread

HellBound Hackers | Computer General | Webmasters Lounge

Author

Hey HBH need a good guide

Mb0742
Member



Posts: 198
Location:
Joined: 26.11.07
Rank:
Apprentice
Posted on 13-11-11 13:06
Anybody got a decent tutorial on building a secure file upload page in php? (Can't do https). Namely preventing some dickhead uploading a 20 gb file etc.

Bit tough being a member on this site and setting out to do something like this following your typical online guides.

On a totally irrelevant point: is anybody else considering buying a plus membership just so they can see the site upgrade?


Mb

Edited by Mb0742 on 13-11-11 13:25
javascript:alert("hi")
Author

RE: Hey HBH need a good guide

Mb0742
Member



Posts: 198
Location:
Joined: 26.11.07
Rank:
Apprentice
Posted on 14-11-11 02:04
thanks, that was my main concern, however what about limiting to files, null byte etc.?


Mb
javascript:alert("hi")
Author

RE: Hey HBH need a good guide

spyware
Member



Posts: 4192
Location: The Netherlands
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 14-11-11 17:30
MoshBat wrote:
Type of file??? Check the file name


No! Check the file header! PHP and Unix-like system have some built-in functions to do this. File uploads are tricky though, especially if you're trying to account for fringe cases and attacks.



img507.imageshack.us/img507/3580/spynewsig3il1.png
"The chowner of property." - Zeph
[small]
Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.
- Carl Sagan
“Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?” - Ebert
[/s
http://bitsofspy.net